SAML Account removed from Administrator

8 replies
264 views

Hi, for any reason may saml account is removed from local Administrators group from Password Safe Cloud. Is there any reason

Prudhvi KeertipatiAnswer

Guru

If you are managing access from AD groups, then disabling the Group Resync doesn’t have any impact on AD group access controls, they function as usual.

Group Resync option applies only to local groups.

Prudhvi K

Prudhvi Keertipati

Guru

@Higor Yes, SAML accounts will be removed from local Administrators groups or any local group, when the below option is enabled.

Configuration → Authentication Management → Authentication Options.

Prudhvi K

H

HigorAuthor

Trailblazer

Oh nice. So in this case I should keep this option unchecked, right? Does it interfere in any other SAML process?

Higor Louback

H

HigorAuthor

Trailblazer

If I understood correctly, if I disable it the groups assigned to users will not be removed, even they are removed from AD. It can cause inconsistences in my access.

Higor Louback

Prudhvi Keertipati

Guru

If you want your users not be removed from local groups then you should disable the group resync.

Are you controlling the group assignment from SAML as well?

Prudhvi K

H

HigorAuthor

Trailblazer

I am controlling only one SAML group. Which contains ALL password safe users. The access inside Password Safe is controlled by AD - which is replicated to PS in a daily bases.

Higor Louback

Prudhvi KeertipatiAnswer

Guru

If you are managing access from AD groups, then disabling the Group Resync doesn’t have any impact on AD group access controls, they function as usual.

Group Resync option applies only to local groups.

Prudhvi K